CYBERSECURITY STRATEGY OF THE REPUBLIC OF CYPRUS 2012 Action 8 - Phase B – Comprehensive survey to record current threats and attacks in cyberspace that have been published in Cyprus, as well as monitoring new threats that appear in the European and international space. .. 21 Action 9 - Phase B – Development of a National Cybersecurity Framework which will promote the protection of critical information infrastructures in the Republic of Cyprus, as well as governmental departments and services. ............................................................................................................................................................................ 22 Action 10 - Phase A – Ensure the full functionality of Computer Emergency Response Teams (CERTs/CSIRTs), with immediate priority for the operation of the Governments CERT/CSIRT. Necessary certifications and memberships will be obtained to allow their participation in relevant European working groups. ..................... 23 Action 11 - Phase B – Assessment by OCECPR, in cooperation with the CERTs/CSIRTs, of expanding their activities or creating new CERTs/CSIRTs to cover the needs of the private sector and the business community................. 23 Action 12 - Phase A – Planning and organisation of regular national cybersecurity exercises, with increasingly realistic scenarios, as well as active participation in pan-European and other international cyber exercises. ...... 24 Action 13 - Phase B – Development of suitable human resources that will have the necessary technical knowhow and certifications to implement the provisions of this Strategy to a high level, in the mid- and long-term, and inclusion of these skills and certifications into the job descriptions for related positions. ............................ 24 Action 14 - Phase B – Development of a comprehensive National Awareness Programme for cybersecurity matters, covering all users of electronic systems, from governmental workers to citizens of the State. .............. 25 Action 15 - Phase A – The Republic of Cyprus will continue to build upon its constructive cooperation with the rest of the European Union member states, through its representation and active contributions to relevant working groups and fora. This cooperation will support the actions and activities on a Union level to improve the level of cybersecurity in the whole of Europe. ............................................................................................... 26 Action 16 - Phase A – Development of a National Contingency Plan, which will contain detailed processes and measures that will be taken when a large scale crisis affects the operations of critical information infrastructures in the Republic of Cyprus to a significant degree, with the aim of maintaining their operation at an acceptable minimum level until full restoration. ................................................................................................................... 28 Action 17 - Phase A/B – Identification and study of the interdependencies that exist for the implementation of this Strategy. These interdependencies will initially be identified as existing in the relationships between the actions themselves, the relationships between the competent authorities of the State, and the relationships between the critical infrastructure operators with their suppliers, customers and staff. These interdependencies must be recognised and accepted by all relevant stakeholders. .......................................................................... 28 32